Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/9S5jL8DHdKsVHxkNZud8BlgTHj0.roa
File: 9S5jL8DHdKsVHxkNZud8BlgTHj0.roa (raw, json)
Hash identifier: 8776VQzy7gkNsGV3nJHM8s9uozdaRRutG5OUUDb0nkQ=
Subject key identifier: F5:2E:63:2F:C0:C7:74:AB:15:1F:19:0D:66:E7:7C:06:58:13:1E:3D
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019232B7087E481AA04FCE2A49199834955A
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/9S5jL8DHdKsVHxkNZud8BlgTHj0.roa
Signing time: Fri 27 Sep 2024 09:01:48 +0000
ROA not before: Fri 27 Sep 2024 09:01:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198510
IP address blocks: 2.57.242.0/24 maxlen: 24
188.208.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Oct 2024 08:05:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:32:b7:08:7e:48:1a:a0:4f:ce:2a:49:19:98:34:95:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 27 09:01:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f52e632fc0c774ab151f190d66e77c0658131e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:63:16:fd:a4:f1:c8:91:9b:4d:7e:be:e7:04:
d0:8b:aa:64:c8:7b:32:3c:c3:f9:28:84:1e:11:6d:
17:77:ac:84:38:4a:e4:4f:0e:aa:c8:a8:06:2f:15:
82:d3:08:5d:bc:97:53:ec:70:87:7c:89:dd:0a:80:
f3:ef:8d:d5:04:71:28:e1:ca:e7:58:c6:f9:c6:c3:
73:c8:82:00:f0:63:48:c0:39:22:84:b8:32:3b:db:
76:83:92:e9:42:31:b1:3f:8a:d7:97:15:34:ba:b5:
7e:54:1b:11:d3:13:15:ed:cc:a3:c7:55:be:e7:b2:
49:53:3f:70:8d:a9:9a:14:6d:cc:f3:e1:74:a6:e2:
68:ec:31:22:cd:74:f7:f6:b5:f3:3e:7c:3a:b7:61:
42:40:53:a4:2c:fc:02:95:eb:92:13:dd:63:f4:b6:
5d:b0:09:41:d8:3c:5d:a2:b2:9e:f9:df:b9:d8:d9:
c1:b2:c7:a6:f6:75:96:c6:8d:95:2c:87:6a:ec:b2:
69:4e:e8:e6:0c:58:f6:cb:f9:e7:02:51:38:c8:91:
3b:21:9e:3a:45:db:e8:27:02:9a:6d:58:52:15:e2:
c2:5c:f5:ad:01:e0:01:0a:60:8a:10:28:aa:cf:15:
08:cf:b2:0f:6d:bb:98:3f:91:89:e0:40:18:2c:23:
de:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:2E:63:2F:C0:C7:74:AB:15:1F:19:0D:66:E7:7C:06:58:13:1E:3D
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/9S5jL8DHdKsVHxkNZud8BlgTHj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.242.0/24
188.208.103.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:68:98:31:f1:3a:22:54:a7:c5:74:52:d2:40:f6:e1:bb:5d:
85:e2:48:b7:f0:8a:18:d3:aa:8a:60:73:c2:58:22:04:5e:4b:
ac:2c:58:ad:bd:4b:3c:5c:1c:06:85:ae:a1:8f:36:a1:50:bb:
d1:5c:68:3b:46:4d:b7:c8:53:c8:5b:ca:51:65:ad:4d:17:38:
0f:b8:d4:f7:e1:42:d9:ae:66:25:9b:db:c6:c7:76:cc:f7:c5:
ee:a7:07:c2:cd:db:10:04:07:db:1e:f0:a4:89:48:10:0f:14:
63:c0:d5:cc:c1:d7:2f:7b:b5:18:25:59:27:67:f8:58:b1:ac:
2b:62:7d:32:51:50:5c:9f:fc:66:9b:ba:fc:c8:17:30:44:c4:
cd:ba:32:27:d7:d3:83:2b:5b:60:16:cc:91:b5:da:7f:f4:c1:
a9:71:30:7e:7f:69:f7:e6:27:f6:0d:c8:e9:77:6c:9a:5c:bd:
16:5e:3f:00:0b:b3:ee:3c:5c:64:18:f8:98:50:76:b8:e0:4a:
bb:7a:bb:29:69:c4:35:1f:d0:5e:25:1a:f0:07:4e:39:6a:15:
c1:c5:4e:cc:94:53:6a:58:ec:f8:55:b8:eb:bd:b8:e9:a7:7e:
81:96:50:c6:7e:5e:8a:5f:a4:41:42:3b:a6:cf:2c:a2:c1:58:
33:df:87:10
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZIytwh+SBqgT84qSRmYNJVaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjQwOTI3MDkwMTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTJlNjMyZmMwYzc3NGFiMTUxZjE5MGQ2NmU3N2MwNjU4MTMxZTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWMW/aTxyJGbTX6+5wTQi6pkyHsy
PMP5KIQeEW0Xd6yEOErkTw6qyKgGLxWC0whdvJdT7HCHfIndCoDz743VBHEo4crn
WMb5xsNzyIIA8GNIwDkihLgyO9t2g5LpQjGxP4rXlxU0urV+VBsR0xMV7cyjx1W+
57JJUz9wjamaFG3M8+F0puJo7DEizXT39rXzPnw6t2FCQFOkLPwCleuSE91j9LZd
sAlB2DxdorKe+d+52NnBssem9nWWxo2VLIdq7LJpTujmDFj2y/nnAlE4yJE7IZ46
RdvoJwKabVhSFeLCXPWtAeABCmCKECiqzxUIz7IPbbuYP5GJ4EAYLCPeNwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPUuYy/Ax3SrFR8ZDWbnfAZYEx49MB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvOVM1akw4REhkS3NWSHhrTlp1ZDhCbGdUSGowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAAjnyAwQA
vNBnMA0GCSqGSIb3DQEBCwUAA4IBAQB8aJgx8ToiVKfFdFLSQPbhu12F4ki38IoY
06qKYHPCWCIEXkusLFitvUs8XBwGha6hjzahULvRXGg7Rk23yFPIW8pRZa1NFzgP
uNT34ULZrmYlm9vGx3bM98XupwfCzdsQBAfbHvCkiUgQDxRjwNXMwdcve7UYJVkn
Z/hYsawrYn0yUVBcn/xmm7r8yBcwRMTNujIn19ODK1tgFsyRtdp/9MGpcTB+f2n3
5if2Dcjpd2yaXL0WXj8AC7PuPFxkGPiYUHa44Eq7erspacQ1H9BeJRrwB045ahXB
xU7MlFNqWOz4Vbjrvbjpp36BllDGfl6KX6RBQjumzyyiwVgz34cQ
-----END CERTIFICATE-----
Generated at Wed Oct 30 10:37:44 2024 by rpki-client on console-ams.rpki-client.org